Version - 1.26

Date: 2025.05.08

General Enhancements:

1. Display Exception Details in Policy Panel: Exception details are now shown in the Policy Details panel with a Yes/No indicator for better visibility.

2. AI Site Field Update in Add Site Modal: The AI Site field has been changed from a toggle to a dropdown with "Yes" and "No" options for consistency.

3. Updated Field Names in Alert UX:

   • Confidence renamed to AI Risk Level.

   • Severity renamed to Policy Severity.

   • LLM Risk Level renamed to AI Risk Level.

   • Changes are reflected in the details panel and view details in Alert Summary page.

Technical Enhancements:

1. Dynamic Site & User Selection in Policy Evaluation: Policy evaluation now dynamically references site and user collections at runtime. Policies using criteria like Category = Artificial Intelligence or Group = Engineering will automatically apply to newly added sites or users that match the criteria—no manual updates needed.

2. Just-In-Time (JIT) User Provisioning for Enterprise Domains: support JIT provisioning. Now, if a user logs in via Google SSO or EntraID SSO and their email belongs to an approved enterprise domain, the system will automatically provision the user—even if they are not yet synced via directory.

3. Exception Support for URL Protection Policies: URL Protection policies now fully support exception handling.

Fixed Issues:

1. Zero Trust (Default Deny) Policy Support: Policies now support default deny mode, blocking all sites unless explicitly allowed or protected for sensitive user groups/sites.

2. Rule Data Missing After Identifier Type Edit: Rule details now load correctly when switching from Predefined to User Defined identifiers.

3. Profile Edit Not Saving Rule Type: Rule type changes are now retained properly after editing and saving a profile.

4. Prevent Duplicate Policy Actions in Exceptions: Validation added to block multiple conflicting policy actions within a single exception rule.

5. Incorrect Default Action in Warn Alert Exceptions: System now defaults to supported actions (Allow/Block) only; other action is excluded.

6. Duplicate User Name Conditions Allowed in Exception Rule: UI now prevents logically conflicting user name conditions in the same Exception rule.

7. Large File Upload Detection: Fixed issue where large file uploads were not being detected.

8. Exception Popup Persistence After Cancel: Exception popup no longer reappears after being cancelled and reopening Match Criteria.

9. Comment Lines in PRE_DEFINED Rule XML: Rule detail pages now include original XML comment lines containing classification rule metadata.

10. Retained Criteria Values in Exception Creation: Switching criteria (e.g., from Username to Email) now clears previous values automatically.

11. Proper Error Message When Policy Is Deleted: User is now shown a relevant message instead of "Something went wrong" when creating an exception for a deleted policy.

12. Consistent User Action Filter Between Alerts and Events: Dropdown with checkboxes is now standard in both Alerts and Events pages for filtering User Actions.

13. Missing "History Fetch" in User Action Filter: Added "History Fetch" option to User Action filter in Events page.

14. Missing Filters Under Related Alerts: Added "Destination Domain" and "Data Profiles" filters (renamed from Site and Data Profile) under Related Alerts.

15. Policy Action Defaults to Block on Edit: Editing now reflects the originally saved action, such as "Allow".

16. Missing Site Data for www-Prefixed URLs: Site data is now correctly displayed for www-prefixed URLs (e.g., www.youtube.com).

Browser Extension:

1. Fix for Incorrect logged_in_as Field Without Active Login: The logged_in_as field is now correctly left blank if no active session is detected, triggering the correct sensitive content prompt.